NVD

Id
24088  
Name
CVE-2015-1884  
Description
Directory traversal vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2 through 7.2.0.5 allows remote authenticated users to read arbitrary files via a crafted internationalization-file URL.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-06-28  
Modified Date
2016-12-27  
Seq
2015-1884  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
127891 24088 CVE-2015-1884 JR52957  View
127892 24088 CVE-2015-1884 http://www-01.ibm.com/support/docview.wss?uid=swg21700831  View
127893 24088 CVE-2015-1884 75360  View
127894 24088 CVE-2015-1884 1032700  View
127895 24088 CVE-2015-1884 1032701  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7991 JVNDB-2015-003311 IBM Business Process Manager および WebSphere Lombardi Edition におけるディレクトリトラバーサルの脆弱性 IBM Business Process Manager (BPM) および WebSphere Lombardi Edition (WLE) には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2015-1884 79109 CVE-2015-1884 24088 4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003311.html 2015-06-19 2015-06-30 View